Files
survey-bundle/public/css/auth-module.css
T
Jürgen Mummert db7094fd1e Fix frontend CSRF, clean reader URLs, and review findings
CSRF / actions:
- List action forms now send both REQUEST_TOKEN (Contao gate) and _token
  (Symfony, validated via isCsrfTokenValid) — mirrors the editor; fixes
  the 400/500 "Ungültiger CSRF-Token" on publish/toggle/duplicate/delete

Public reader / URLs:
- Reader & results read auto_item via Input::get (marks the route param used)
  so clean path URLs /<page>/<alias> no longer 404
- List controller generates path URLs via ['parameters' => '/'.$alias]
- Allow re-participation in the same session after a 60s cooldown

Review fixes:
- Results: merge answer snapshots by questionId+type (no more split cards on
  label edits); seed "Vielleicht" when allowMaybe so screen matches Excel
- Reader: replace generic answer hint with per-option "weiter zu Frage X"
  only when a jump is configured; strip HTML tags from survey description
- PDF: render free-text frequency summary; drop duplicate "Minimum" label
- Drag-sort: bundle SortableJS locally, drop the duplicated inline sort CSS/JS
  from _survey_assets, throttle the backend MutationObserver
- Backend: move hardcoded tl_survey operation labels to TL_LANG (de+en)
- Remove dead code: SurveyEditorVoter, SurveyPermissionService,
  categoryFilter/categorySummary + helpers, orphaned publishSurvey lang key

Reader layout:
- max-width 1000px (other views keep 1400px); back/next buttons fill the
  width as equal, card-sized halves; sort handle icon offset tweak

Docs: update AI_HANDOVER (dual-token CSRF, clean URLs) and README

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 13:00:05 +02:00

234 lines
6.0 KiB
CSS

@font-face {
font-family: "PT Sans Narrow";
src: url("../fonts/PTSansNarrow-Regular.woff2") format("woff2");
font-weight: 400;
font-style: normal;
font-display: swap;
}
@font-face {
font-family: "PT Sans Narrow";
src: url("../fonts/PTSansNarrow-Bold.woff2") format("woff2");
font-weight: 700;
font-style: normal;
font-display: swap;
}
@font-face {
font-family: "Blogger Sans";
src: url("../fonts/Blogger%20Sans-Medium.woff2") format("woff2");
font-weight: 500;
font-style: normal;
font-display: swap;
}
:root {
--survey-auth-blue: #0064ad;
--survey-auth-orange: #ec7c32;
--survey-auth-green: #00ae97;
--survey-auth-ink: #22313f;
--survey-auth-muted: #5f6975;
--survey-auth-border: rgba(162, 168, 180, 0.34);
--survey-auth-surface: rgba(255, 255, 255, 0.94);
--survey-auth-shadow: 0 28px 70px rgba(34, 34, 34, 0.12);
}
.mod_login.block.login {
max-width: min(100%, 36rem);
margin: clamp(1.5rem, 4vw, 3rem) auto;
padding: clamp(1.5rem, 2.6vw, 2.4rem);
border: 1px solid var(--survey-auth-border);
border-radius: 1.8rem;
background:
radial-gradient(circle at top left, rgba(0, 100, 173, 0.2), transparent 36%),
radial-gradient(circle at bottom right, rgba(0, 174, 151, 0.16), transparent 38%),
linear-gradient(180deg, rgba(255, 255, 255, 0.97) 0%, rgba(248, 251, 255, 0.96) 100%);
box-shadow: var(--survey-auth-shadow);
box-sizing: border-box;
font-family: "PT Sans Narrow", sans-serif;
color: var(--survey-auth-ink);
}
.mod_login.block.login form,
.mod_login.block.login .formbody {
margin: 0;
}
.mod_login.block.login .formbody {
display: grid;
gap: 1rem;
}
.mod_login.block.login .widget {
margin: 0;
}
.mod_login.block.login .widget-text,
.mod_login.block.login .widget-password {
display: grid;
gap: 0.45rem;
}
.mod_login.block.login label,
.mod_login.block.login legend {
font-family: "Blogger Sans", sans-serif;
font-size: 1rem;
font-weight: 500;
color: var(--survey-auth-blue);
letter-spacing: 0.01em;
}
.mod_login.block.login input.text,
.mod_login.block.login input.password {
width: 100%;
min-height: 3.2rem;
padding: 0.8rem 0.95rem;
border: 1px solid rgba(162, 168, 180, 0.48);
border-radius: 1rem;
background: rgba(255, 255, 255, 0.94);
box-shadow: inset 0 1px 2px rgba(34, 34, 34, 0.04);
box-sizing: border-box;
font: inherit;
color: var(--survey-auth-ink);
transition: border-color 0.18s ease, box-shadow 0.18s ease, background-color 0.18s ease;
}
.mod_login.block.login input.text:focus,
.mod_login.block.login input.password:focus {
outline: none;
border-color: rgba(0, 100, 173, 0.72);
box-shadow: 0 0 0 4px rgba(0, 100, 173, 0.12);
background: #fff;
}
.mod_login.block.login .widget-checkbox {
margin-top: 0.15rem;
}
.mod_login.block.login .checkbox_container {
margin: 0;
padding: 0;
border: 0;
}
.mod_login.block.login .checkbox_container > span {
display: inline-flex;
align-items: center;
gap: 0.65rem;
color: var(--survey-auth-muted);
}
.mod_login.block.login input.checkbox {
width: 1.05rem;
height: 1.05rem;
accent-color: var(--survey-auth-green);
}
.mod_login.block.login .widget-submit {
margin-top: 0.3rem;
}
.mod_login.block.login button.submit {
display: inline-flex;
justify-content: center;
align-items: center;
min-height: 3.2rem;
padding: 0.8rem 1.35rem;
border: 0;
border-radius: 999px;
background: linear-gradient(135deg, var(--survey-auth-blue), #0d7acb);
color: #fff;
font-family: "Blogger Sans", sans-serif;
font-size: 1rem;
font-weight: 500;
letter-spacing: 0.01em;
cursor: pointer;
box-shadow: 0 16px 28px rgba(0, 100, 173, 0.24);
transition: transform 0.18s ease, box-shadow 0.18s ease, filter 0.18s ease;
}
.mod_login.block.login button.submit:hover,
.mod_login.block.login button.submit:focus {
transform: translateY(-1px);
box-shadow: 0 18px 34px rgba(0, 100, 173, 0.28);
filter: saturate(1.05);
}
.mod_login.block.login button.submit:focus {
outline: none;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) {
position: fixed;
top: 1em;
right: 1em;
z-index: 1000;
margin: 0;
padding: 0;
border: 0;
border-radius: 0;
background: transparent;
box-shadow: none;
box-sizing: border-box;
overflow: visible;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) .invisible {
display: none !important;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) .level_1 {
display: flex;
justify-content: center;
margin: 0;
padding: 0;
list-style: none;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) .level_1 > li {
margin: 0;
padding: 0;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) .level_1 > li > a {
display: inline-flex;
align-items: center;
justify-content: center;
min-height: 2.45rem;
padding: 0.5rem 0.9rem;
border-radius: 999px;
border: 1px solid rgba(0, 100, 173, 0.16);
background: rgba(255, 255, 255, 0.92);
color: var(--survey-auth-blue);
font-family: "Blogger Sans", sans-serif;
font-size: 0.92rem;
font-weight: 500;
text-decoration: none;
backdrop-filter: blur(10px);
box-shadow: 0 10px 24px rgba(34, 34, 34, 0.1);
transition: transform 0.18s ease, box-shadow 0.18s ease, color 0.18s ease, background-color 0.18s ease;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) .level_1 > li > a:hover,
nav.mod_customnav.block:has(a[href*="/abmelden"]) .level_1 > li > a:focus {
transform: translateY(-1px);
background: rgba(255, 255, 255, 0.98);
box-shadow: 0 14px 28px rgba(0, 100, 173, 0.16);
color: #004f88;
}
@media (max-width: 767px) {
.mod_login.block.login {
padding: 1.2rem;
border-radius: 1.35rem;
}
nav.mod_customnav.block:has(a[href*="/abmelden"]) {
top: 0.75rem;
right: 0.75rem;
}
.mod_login.block.login button.submit {
width: 100%;
}
}